# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=366

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 367

---

## [Kibana throwing error "{"statusCode":503,"error":"Service Unavailable","message":"Service Unavailable"}"](https://discuss.elastic.co/t/kibana-throwing-error-statuscode-503-error-service-unavailable-message-service-unavailable/263844)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 9\
**Last updated:** [February 11, 2021, 4:22pm UTC](https://discuss.elastic.co/t/kibana-throwing-error-statuscode-503-error-service-unavailable-message-service-unavailable/263844 "2021-02-11T16:22:35Z")

</div>

Hi Team, Im using kibana version 6.4.0 and when ever i try to save or create new index im getting 503 error. All the elasticsearch service are up and running. My setup is 3 Master and 3 Data and 1 coordinate Node. My…

---

## [Unique Count by Bucket](https://discuss.elastic.co/t/unique-count-by-bucket/263978)

<div class="topic-metadata">

**Author:** [@Razvan\_Todea](https://discuss.elastic.co/u/Razvan_Todea)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 4:13pm UTC](https://discuss.elastic.co/t/unique-count-by-bucket/263978 "2021-02-11T16:13:54Z")

</div>

How could we visualize an unique count grouped by bucket? We understand that the counting will only check the uniqueness inside the bucket, but is it another way to achieve this? Example: We want to visualize all the u…

---

## [Kibana Fleet error after upgrading Elastic Cloud to 7.11](https://discuss.elastic.co/t/kibana-fleet-error-after-upgrading-elastic-cloud-to-7-11/263969)

<div class="topic-metadata">

**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\
**Replies:** 8\
**Last updated:** [February 11, 2021, 3:23pm UTC](https://discuss.elastic.co/t/kibana-fleet-error-after-upgrading-elastic-cloud-to-7-11/263969 "2021-02-11T15:23:50Z")

</div>

Hi, We get the following error when opening fleet page after upgrading from 7.10.2 to 7.11: Unable to initialize Fleet \[illegal\_argument\_exception\] updating component template \[logs-endpoint.events.file-mappings\] resu…

---

## [Issues with Fleet after upgrade to 7.11](https://discuss.elastic.co/t/issues-with-fleet-after-upgrade-to-7-11/264021)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 3\
**Last updated:** [February 11, 2021, 2:48pm UTC](https://discuss.elastic.co/t/issues-with-fleet-after-upgrade-to-7-11/264021 "2021-02-11T14:48:29Z")

</div>

After an Upgrade to 7.11, i receive Errors about composable templates that back data streams. Because of this, I can't open the Fleet view. The errors occur for seemingly all data streams. The indices have no aliases con…

---

## [\[SOLVED\] I can't use winlogbeat with Kibana](https://discuss.elastic.co/t/solved-i-cant-use-winlogbeat-with-kibana/263908)

<div class="topic-metadata">

**Author:** [@Christian\_SG](https://discuss.elastic.co/u/Christian_SG)\
**Replies:** 4\
**Last updated:** [February 11, 2021, 2:12pm UTC](https://discuss.elastic.co/t/solved-i-cant-use-winlogbeat-with-kibana/263908 "2021-02-11T14:12:41Z")

</div>

Hi everyone, I'm running elasticsearch and Kibana in a Debian10 machine, everything was working perfectly. Then I tried intalling winlogbeat in a Windows10 machine and here comes my problem, I've been searching for many …

---

## [Error migrating after upgrading to 7.11](https://discuss.elastic.co/t/error-migrating-after-upgrading-to-7-11/263928)

<div class="topic-metadata">

**Author:** [@stephan13360](https://discuss.elastic.co/u/stephan13360)\
**Replies:** 6\
**Last updated:** [February 11, 2021, 1:22pm UTC](https://discuss.elastic.co/t/error-migrating-after-upgrading-to-7-11/263928 "2021-02-11T13:22:57Z")

</div>

I just upgraded my Elasticsearch / Kibana from 7.10.2 to 7.11 and now Kibana logs the following error when trying to run the migration: { "type": "log", "@timestamp": "2021-02-10T20:11:18+01:00", "tags": \["fatal",…

---

## [Show graph on Number of Lines instead of Number of Bytes](https://discuss.elastic.co/t/show-graph-on-number-of-lines-instead-of-number-of-bytes/263939)

<div class="topic-metadata">

**Author:** [@homius](https://discuss.elastic.co/u/homius)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 1:14pm UTC](https://discuss.elastic.co/t/show-graph-on-number-of-lines-instead-of-number-of-bytes/263939 "2021-02-11T13:14:43Z")

</div>

Hi All, I am totally new in Kibana so my question might be dumb. In my Kibana Dashboard I see graph of my http requests/responses (Users, Total Processed, Request Rate,...). It also shows "Processed Prediction Bytes". Ho…

---

## [Multiple problems with Kibana Dashboards (Metricbeat/Winlogbeat)](https://discuss.elastic.co/t/multiple-problems-with-kibana-dashboards-metricbeat-winlogbeat/263424)

<div class="topic-metadata">

**Author:** [@keyofstarrysky973](https://discuss.elastic.co/u/keyofstarrysky973)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 12:29pm UTC](https://discuss.elastic.co/t/multiple-problems-with-kibana-dashboards-metricbeat-winlogbeat/263424 "2021-02-11T12:29:40Z")

</div>

Hey Everyone. I have followed a basic implementation of ELK Stack (version 7.10) on a Windows 10 machine. Now though, I'm having problems with the visualisation of data from two Beats agents (Metricbeat and Winlogbeat). …

---

## [Ho to make the URL Drill downs automatic as part of docker image or k8s configmap?](https://discuss.elastic.co/t/ho-to-make-the-url-drill-downs-automatic-as-part-of-docker-image-or-k8s-configmap/263957)

<div class="topic-metadata">

**Author:** [@Rajesh\_Reddy\_N](https://discuss.elastic.co/u/Rajesh_Reddy_N)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 12:16pm UTC](https://discuss.elastic.co/t/ho-to-make-the-url-drill-downs-automatic-as-part-of-docker-image-or-k8s-configmap/263957 "2021-02-11T12:16:31Z")

</div>

Hi, we have ingested lots of data to elastic search and visualizing through the Kibana 7.7. We are able to do create drill-down charts but the URL mapping needs to be done manually. eg: loglevel.keyword -\> enable it as…

---

## [Custom Visualizations, How to pass in plugin start lifecycle](https://discuss.elastic.co/t/custom-visualizations-how-to-pass-in-plugin-start-lifecycle/263927)

<div class="topic-metadata">

**Author:** [@sdeck51](https://discuss.elastic.co/u/sdeck51)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 10:50am UTC](https://discuss.elastic.co/t/custom-visualizations-how-to-pass-in-plugin-start-lifecycle/263927 "2021-02-11T10:50:27Z")

</div>

Hi, I was looking at the following example to see how a custom kibana viz is set up. From what I see we can create a react/base visualization in the setup lifecycle function of the plugin. This means we could pass set…

---

## [Progress of 7.10.0 to 7.11.0 upgrade status](https://discuss.elastic.co/t/progress-of-7-10-0-to-7-11-0-upgrade-status/263977)

<div class="topic-metadata">

**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\
**Replies:** 2\
**Last updated:** [February 11, 2021, 10:37am UTC](https://discuss.elastic.co/t/progress-of-7-10-0-to-7-11-0-upgrade-status/263977 "2021-02-11T10:37:36Z")

</div>

I run single node https://github.com/deviantony/docker-elk dockerized E, L and K. I upgraded the stack with docker-compose build and docker-compose up -d . Now the startup seems to be stuck at: {"type":"log","@timesta…

---

## [Purpose of TSVB Aggregation feature under Options tab for TSVB table](https://discuss.elastic.co/t/purpose-of-tsvb-aggregation-feature-under-options-tab-for-tsvb-table/263854)

<div class="topic-metadata">

**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\
**Replies:** 2\
**Last updated:** [February 11, 2021, 9:56am UTC](https://discuss.elastic.co/t/purpose-of-tsvb-aggregation-feature-under-options-tab-for-tsvb-table/263854 "2021-02-11T09:56:45Z")

</div>

Hello All, In the TSVB panel for Table, I can find choices to aggregate under two different places.. Under the metrics tab Under the options tab There is some special reason/ use of having two aggregation choice…

---

## [Share only the dasboard](https://discuss.elastic.co/t/share-only-the-dasboard/263959)

<div class="topic-metadata">

**Author:** [@albie.morken](https://discuss.elastic.co/u/albie.morken)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 9:05am UTC](https://discuss.elastic.co/t/share-only-the-dasboard/263959 "2021-02-11T09:05:22Z")

</div>

I am trying to display the kibana dashboard in one of the html page. I use the share option provided in the dashboard But instead of getting only that particular dashboard, with this link, I am able to see whole kiban…

---

## [\[Alerting\] My alerts are broken after upgrading Elastic Cloud to 7.10.2](https://discuss.elastic.co/t/alerting-my-alerts-are-broken-after-upgrading-elastic-cloud-to-7-10-2/263898)

<div class="topic-metadata">

**Author:** [@nickbabkin](https://discuss.elastic.co/u/nickbabkin)\
**Replies:** 3\
**Last updated:** [February 11, 2021, 6:38am UTC](https://discuss.elastic.co/t/alerting-my-alerts-are-broken-after-upgrading-elastic-cloud-to-7-10-2/263898 "2021-02-11T06:38:41Z")

</div>

Hi! After upgrading ES cluster and Kibana to 7.10.2, I noticed that some of my alerts have started to throw error and hence refuse to work due to these error: An error occurred when decrypting the alert. Unable to dec…

---

## [Legend in map visualization](https://discuss.elastic.co/t/legend-in-map-visualization/263799)

<div class="topic-metadata">

**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\
**Replies:** 4\
**Last updated:** [February 11, 2021, 4:38am UTC](https://discuss.elastic.co/t/legend-in-map-visualization/263799 "2021-02-11T04:38:57Z")

</div>

Hello, I have tried to get legend (as above one) for below map but didn't find that option anywhere in 7.9 version. Is there any way to add legend in map ?

---

## [Kibana React Plugin CSS is affecting other areas of the site](https://discuss.elastic.co/t/kibana-react-plugin-css-is-affecting-other-areas-of-the-site/263936)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 1\
**Last updated:** [February 10, 2021, 9:55pm UTC](https://discuss.elastic.co/t/kibana-react-plugin-css-is-affecting-other-areas-of-the-site/263936 "2021-02-10T21:55:03Z")

</div>

I have a Kibana plugin, done in React, only intended as an element for Canvas Dashboard. However, I notice that certain CSS styling changes also affect other areas of the site when the plugin is deployed. Is there anythi…

---

## [How to create a Vega bar graph with the unique count of devices?](https://discuss.elastic.co/t/how-to-create-a-vega-bar-graph-with-the-unique-count-of-devices/263447)

<div class="topic-metadata">

**Author:** [@Chris6](https://discuss.elastic.co/u/Chris6)\
**Replies:** 14\
**Last updated:** [February 10, 2021, 6:30pm UTC](https://discuss.elastic.co/t/how-to-create-a-vega-bar-graph-with-the-unique-count-of-devices/263447 "2021-02-10T18:30:37Z")

</div>

Hello, I have some events that where created: In file 1: {"souceNetwork":"cc567", "sourceDevice":"z01", "destinationNetwork":"cc567", "destinationDevice":"z02", "path":"/user/file1"} {"sourceNetwork":"cc567", "source…

---

## [Enable Alerts and Actions](https://discuss.elastic.co/t/enable-alerts-and-actions/261180)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 16\
**Last updated:** [February 10, 2021, 4:25pm UTC](https://discuss.elastic.co/t/enable-alerts-and-actions/261180 "2021-02-10T16:25:51Z")

</div>

Is there a blog site or is there some one might have wrote step by step instruction on how to turn on Alerts and Actions? I have read few document and trying to follow this but got completely lost https://www.elastic.c…

---

## [Setup Alert for Kibana](https://discuss.elastic.co/t/setup-alert-for-kibana/263753)

<div class="topic-metadata">

**Author:** [@nguyenduyhung1979](https://discuss.elastic.co/u/nguyenduyhung1979)\
**Replies:** 1\
**Last updated:** [February 10, 2021, 3:59pm UTC](https://discuss.elastic.co/t/setup-alert-for-kibana/263753 "2021-02-10T15:59:22Z")

</div>

I have ELK stack (version 7.9.3) system work well in Windows with default setting. I tried to configure Alert for Kibana by following steps: Stop all services Update the following settings in the kibana.yml configurati…

---

## [Sum operator in stacked bar vega](https://discuss.elastic.co/t/sum-operator-in-stacked-bar-vega/263722)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 4\
**Last updated:** [February 10, 2021, 3:26pm UTC](https://discuss.elastic.co/t/sum-operator-in-stacked-bar-vega/263722 "2021-02-10T15:26:17Z")

</div>

Hi, I have aggregated StatusOpen field using sum operator, grouped by text\_sentiment and subject\_line fields. It's giving correct results in kibana. I tried it in vega using below spec : { "$schema": "https://veg…

---

## [More easily track a single email between services and servers](https://discuss.elastic.co/t/more-easily-track-a-single-email-between-services-and-servers/263752)

<div class="topic-metadata">

**Author:** [@jmcclelland](https://discuss.elastic.co/u/jmcclelland)\
**Replies:** 2\
**Last updated:** [February 10, 2021, 1:49pm UTC](https://discuss.elastic.co/t/more-easily-track-a-single-email-between-services-and-servers/263752 "2021-02-10T13:49:57Z")

</div>

Hi all, We are sending our postfix logs to elasticsearch using journalbeat. Our email system sends messages from one server to another and on a given server, from one service to another service (spam checking etc). Each …

---

## [Implement Shareable URL](https://discuss.elastic.co/t/implement-shareable-url/263602)

<div class="topic-metadata">

**Author:** [@praveer](https://discuss.elastic.co/u/praveer)\
**Replies:** 2\
**Last updated:** [February 10, 2021, 12:44pm UTC](https://discuss.elastic.co/t/implement-shareable-url/263602 "2021-02-10T12:44:54Z")

</div>

Hi Team, In my application I am using data plugin to do elastic queries and display graphically. Now i have a requirement to create url which is shareable. I want to store all the applied filters in url an share it and…

---

## [After migrating from 7.8.3 to 7.10.2 kibana keeps restarting](https://discuss.elastic.co/t/after-migrating-from-7-8-3-to-7-10-2-kibana-keeps-restarting/263261)

<div class="topic-metadata">

**Author:** [@cor](https://discuss.elastic.co/u/cor)\
**Replies:** 16\
**Last updated:** [February 10, 2021, 12:38pm UTC](https://discuss.elastic.co/t/after-migrating-from-7-8-3-to-7-10-2-kibana-keeps-restarting/263261 "2021-02-10T12:38:47Z")

</div>

Hi all, Ather upgrading Elasticsearch and Kibana to 7.10.2, Kibana keeps restarting. during logging it repeats the following message over and over using different PID codes. '{"type":"log","@timestamp":"2021-02-04T14:…

---

## [How to store boolean value or empty-able value in Index Connector of Kibana Alerts?](https://discuss.elastic.co/t/how-to-store-boolean-value-or-empty-able-value-in-index-connector-of-kibana-alerts/263481)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 2\
**Last updated:** [February 10, 2021, 12:10pm UTC](https://discuss.elastic.co/t/how-to-store-boolean-value-or-empty-able-value-in-index-connector-of-kibana-alerts/263481 "2021-02-10T12:10:45Z")

</div>

Hi thanks for the lib! I see the {{state.isTriggered}} is a boolean. However, I cannot write down that format: If I use "{{state.isTriggered}}", then the document fail to index, because boolean fields cannot accept st…

---

## [Dynamic Nested Key Value List Aggregation](https://discuss.elastic.co/t/dynamic-nested-key-value-list-aggregation/263841)

<div class="topic-metadata">

**Author:** [@alparslan](https://discuss.elastic.co/u/alparslan)\
**Replies:** 2\
**Last updated:** [February 10, 2021, 10:52am UTC](https://discuss.elastic.co/t/dynamic-nested-key-value-list-aggregation/263841 "2021-02-10T10:52:47Z")

</div>

Hi, I have "inputParams" object with dynamic key value pair with the following structure. My purpose is visualizing the "inputParams" field according to key. Keys are not known. It can be change according to process. …

---

## [How to do static field in visualization](https://discuss.elastic.co/t/how-to-do-static-field-in-visualization/263834)

<div class="topic-metadata">

**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\
**Replies:** 6\
**Last updated:** [February 10, 2021, 9:28am UTC](https://discuss.elastic.co/t/how-to-do-static-field-in-visualization/263834 "2021-02-10T09:28:18Z")

</div>

In kibana visualization , for example in last 15 minute the kibana visulization shows that user x has count 10 then after 15 minutes if a user is not using computer then it should show count 0 and yes it should also show…

---

## [Search Error - All Shards failed](https://discuss.elastic.co/t/search-error-all-shards-failed/263817)

<div class="topic-metadata">

**Author:** [@Hyun\_Choi](https://discuss.elastic.co/u/Hyun_Choi)\
**Replies:** 1\
**Last updated:** [February 10, 2021, 8:28am UTC](https://discuss.elastic.co/t/search-error-all-shards-failed/263817 "2021-02-10T08:28:22Z")

</div>

After parsing JSON log with the filter I used below filter { if \[type\] == "vizql\_cpp" or \[type\] == "vizql\_tabprotosrv" { json { source =\> "message" } mutate { rename =\>…

---

## [Common properties on docs](https://discuss.elastic.co/t/common-properties-on-docs/263412)

<div class="topic-metadata">

**Author:** [@Faycal](https://discuss.elastic.co/u/Faycal)\
**Replies:** 4\
**Last updated:** [February 10, 2021, 8:09am UTC](https://discuss.elastic.co/t/common-properties-on-docs/263412 "2021-02-10T08:09:44Z")

</div>

Hello all, i'm new on this community. I have an index of "hits" and for each document we have two parameters: user genre example: doc1 user:john genre:rock doc2 user:john genre:rap doc3 user:bruce genre:ro…

---

## [\[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out](https://discuss.elastic.co/t/error-data-elasticsearch-timeouterror-request-timed-out/263830)

<div class="topic-metadata">

**Author:** [@tushar1092](https://discuss.elastic.co/u/tushar1092)\
**Replies:** 1\
**Last updated:** [February 10, 2021, 8:01am UTC](https://discuss.elastic.co/t/error-data-elasticsearch-timeouterror-request-timed-out/263830 "2021-02-10T08:01:01Z")

</div>

I am trying to install Kibana on my windows machine, it keeps giving me error. I have also tried to delete all Kibana task - curl -XDELETE http://localhost:9200/.kibana\* But still getting this error. Below are the logs.…

---

## [Can I add custom SVGs as symbols on ElasticSearch Kibana Maps?](https://discuss.elastic.co/t/can-i-add-custom-svgs-as-symbols-on-elasticsearch-kibana-maps/263309)

<div class="topic-metadata">

**Author:** [@irwazr](https://discuss.elastic.co/u/irwazr)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 11:43pm UTC](https://discuss.elastic.co/t/can-i-add-custom-svgs-as-symbols-on-elasticsearch-kibana-maps/263309 "2021-02-09T23:43:17Z")

</div>

Hi all, We have a map view taking a GeoJSON feed and plotting points according to long/lat. It works really well, but the out of the box symbols provided don't match our data use-case (weather events etc). I'm capable…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=365)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=367)
